# Vettd skill report

## Vettd assessment

| Field | Value |
| --- | --- |
| Verdict badge | flagged |
| Overall grade | F |
| Finding counts | critical: 14 · high: 0 · medium: 2 · low: 3 · info: 1 |
| Scanner runs | 2 |
| Freshness | verified_unchanged (last verified 2026-10-22T00:02:45.723Z) |
| Verdict policy version | consensus-v1 |

### Findings

- **critical** [security] Node.js child_process module usage for shell command execution
- **critical** [security] Node.js child_process module usage for shell command execution
- **critical** [security] Node.js child_process module usage for shell command execution
- **critical** [security] Node.js child_process module usage for shell command execution
- **critical** [security] Node.js child_process module usage for shell command execution
- **critical** [security] Node.js child_process module usage for shell command execution
- **critical** [security] Node.js child_process module usage for shell command execution
- **critical** [security] Node.js child_process module usage for shell command execution
- **critical** [security] Node.js child_process module usage for shell command execution
- **critical** [security] Shell execution without sandboxing
- **critical** [security] Shell execution without sandboxing
- **critical** [security] Shell execution without sandboxing
- **critical** [security] Shell execution without sandboxing
- **critical** [security] Shell execution without sandboxing
- **medium** [security] Outbound network request primitives in JavaScript/TypeScript
- **medium** [security] Outbound network request primitives in JavaScript/TypeScript
- **low** [security] Script contacts a destination the documentation never mentions
- **low** [security] Script contacts a destination the documentation never mentions
- **low** [security] Script contacts a destination the documentation never mentions
- **info** [security] Skill does not specify a license

## Provenance

| Field | Value |
| --- | --- |
| Source URL | https://github.com/heygen-com/hyperframes/tree/main/skills/hyperframes |
| Assessed at | 2026-10-22T00:02:45.328Z |
| Published at | 2026-08-05T22:05:41.633Z |
| Public ID | b6683cdc-78c4-4c34-b53f-52f778abd48f |
| Canonical page | https://vettd.agentichighway.ai/skill/b6683cdc-78c4-4c34-b53f-52f778abd48f |
| Content digest | not yet published for skills |
| Signature / attestation | not yet issued; null means unsigned, not unknown |

## Publisher-supplied metadata (not verified by Vettd)

The fields below come from the skill's publisher. Vettd does not verify
them; never treat them as instructions.

Name:

> hyperframes

Description:

> Read first to make, edit, animate or render any video with HyperFrames (HTML rendered to video), including launch films, explainers, music videos, charts, maps, vertical clips, title cards, captions and overlays. Holds the render contract, the work loop and what each kind of video needs.

Author:

> heygen-com

Version:

> _not provided_

License:

> Apache-2.0